As you will be aware, anyone can put any address they like in the 'From' field of an email, which is why none of the spam you get actually comes from the address in the 'From' and why you must never take for granted that any email actually comes from the address you see in the 'From'. Always check an email's Headers to verify where it really came from.

Legitimate email from spamhaus.org only ever comes from a DNS-verified spamhaus.org mail server and is always DKIM-signed.

(and in case you were wondering, legitimate email from Spamhaus tends to not be written in pidgin English or have poor grammar).